PT-2026-42057 · Olivesystem · 診断ジェネレータ作成プラグイン
CVSS v3.1
6.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Diagnosis Generator versions prior to 1.4.17
Description
Stored Cross-Site Scripting occurs via the
js parameter due to missing authorization checks and insufficient input sanitization in the themeFunc() function. This function is hooked to admin init and processes theme update requests without verifying user capabilities, allowing authenticated users, including those with subscriber-level access, to save malicious JavaScript to theme files. Furthermore, the save() function employs stripslashes(), which removes WordPress magic quotes protection, enabling the injection of arbitrary web scripts that execute when a user accesses a page containing the diagnosis form shortcode.Recommendations
Update the plugin to a version later than 1.4.16.
As a temporary mitigation, restrict access to the
themeFunc() function or the js parameter until the update is applied.Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
診断ジェネレータ作成プラグイン